Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Microsoft
Azure Monitor

Microsoft Azure Monitor Vulnerabilities: CVEs, CISA KEV & Security Advisories

14 CVEs

Microsoft Azure Monitor Vulnerabilities

CVE security advisories and vulnerability history for Azure Monitor by Microsoft.

14

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

With known exploit

7.9

Avg CVSS

2024–2026

Last updated May 12, 2026

Overview

Microsoft Azure Monitor has 14 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Microsoft Azure Monitor, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include Unknown.

Severity and exploitation

How the CVSS severity of Microsoft Azure Monitor's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High13

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Microsoft Azure Monitor's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Microsoft Azure Monitor CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Microsoft Azure Monitor version named in a CVE, then pick one to see only the CVEs that affect it.

Fixed in

1.26.02 CVEs
1.35.92 CVEs
1.14.01 CVE
1.24.01 CVE
1.30.01 CVE
1.35.11 CVE
1.36.31 CVE
1.38.1.01 CVE
1.41.01 CVE
v1.37.11 CVE

Find a version

14 CVEs

Sort

Azure Monitor Agent Elevation of Privilege Vulnerability
CVE-2026-32204
Patch
CWE-73
High · CVSS 7.8
EPSS 0.1% (22th pct)2026-05-12
Azure Monitor Agent Elevation of Privilege Vulnerability
CVE-2026-32192
Patch
CWE-502
High · CVSS 7.8
EPSS 0.5% (66th pct)2026-04-14
Azure Monitor Agent Elevation of Privilege Vulnerability
CVE-2026-32168
Patch
CWE-20
High · CVSS 7.8
EPSS 0.1% (25th pct)2026-04-14
Azure Monitor Agent Remote Code Execution Vulnerability
CVE-2025-62550
Patch
CWE-131
High · CVSS 8.8
EPSS 0.1% (25th pct)2025-12-09
Azure Monitor Elevation of Privilege Vulnerability
CVE-2025-62207
Patch
CWE-918
High · CVSS 8.6
EPSS 0.1% (30th pct)2025-11-20
Azure Monitor Agent Remote Code Execution Vulnerability
CVE-2025-59504
Patch
CWE-122
High · CVSS 7.3
EPSS 0.1% (17th pct)2025-11-11
Azure Monitor Agent Elevation of Privilege Vulnerability
CVE-2025-59285
Patch
CWE-502
High · CVSS 7.0
EPSS 1.1% (79th pct)2025-10-14
Azure Monitor Agent Elevation of Privilege Vulnerability
CVE-2025-59494
Patch
CWE-284
High · CVSS 7.8
EPSS 0.1% (19th pct)2025-10-14
Azure Monitor Log Analytics Spoofing Vulnerability
CVE-2025-55321
Patch
CWE-79
Critical · CVSS 9.3
EPSS 0.1% (22th pct)2025-10-09
Azure Monitor Agent Remote Code Execution Vulnerability
CVE-2025-47988
Patch
CWE-94
High · CVSS 7.5
EPSS 0.5% (67th pct)2025-07-08
Azure Monitor Agent Elevation of Privilege Vulnerability
CVE-2024-38097
Patch
CWE-59
High · CVSS 7.1
EPSS 0.5% (67th pct)2024-10-08
Azure Monitor Agent Elevation of Privilege Vulnerability
CVE-2024-35254
Patch
CWE-59
High · CVSS 7.1
EPSS 0.7% (73th pct)2024-06-11
High vulnerability · 2024-05-16
CVE-2024-30060
Patch
CWE-59
High · CVSS 7.8
EPSS 1.3% (80th pct)2024-05-16
High vulnerability · 2024-04-09
CVE-2024-29989
Patch
CWE-59
High · CVSS 8.4
EPSS 0.5% (67th pct)2024-04-09

Common weakness types

The CWE weakness categories most often found in Microsoft Azure Monitor CVEs. Follow any weakness for its full explanation.

CWE-59Improper Link Resolution Before File Access ('Link Following')4 CVEs
CWE-502Deserialization of Untrusted Data2 CVEs
CWE-20Improper Input Validation1 CVE
CWE-284Improper Access Control1 CVE
CWE-73External Control of File Name or Path1 CVE
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVE
CWE-918Server-Side Request Forgery (SSRF)1 CVE
CWE-122Heap-based Buffer Overflow1 CVE

Disclosure activity by year

How many Microsoft Azure Monitor CVEs were published each year.

2024

4

2025

7

2026

3

Other Microsoft products

Browse vulnerabilities for other products by Microsoft.

windows10,259 CVEs windows server 20165,207 CVEs windows server 20194,709 CVEs windows 104,437 CVEs windows server 20124,219 CVEs windows server 20084,083 CVEs Windows Server 2019 (Server Core installation)3,456 CVEs Windows 10 Version 18093,187 CVEs

All Microsoft vulnerabilities

Frequently asked questions

Common questions about Microsoft Azure Monitor vulnerabilities.

How many CVEs does Microsoft Azure Monitor have?

Microsoft Azure Monitor has 14 published CVE records since 2024.

How many Microsoft Azure Monitor CVEs are in CISA KEV?

None of Microsoft Azure Monitor's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Microsoft Azure Monitor vulnerabilities?

No Microsoft Azure Monitor CVEs currently have a tracked public exploit in this dataset.

Which versions of Microsoft Azure Monitor are affected?

10 distinct Microsoft Azure Monitor versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Microsoft Azure Monitor CVEs?

Microsoft Azure Monitor's CVEs most often map to these CWE weakness types: CWE-59 (Improper Link Resolution Before File Access ('Link Following')), CWE-502 (Deserialization of Untrusted Data), CWE-20 (Improper Input Validation), CWE-284 (Improper Access Control).

How many critical Microsoft Azure Monitor vulnerabilities are there?

Microsoft Azure Monitor has 1 critical and 13 high-severity CVEs.

What is the average severity of Microsoft Azure Monitor CVEs?

The average CVSS base score across Microsoft Azure Monitor's scored CVEs is 7.9.

References

All Microsoft vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Microsoft Azure Monitor vulnerabilities

Monitor new Microsoft Azure Monitor vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References